Login Request a demo
EG
Product
Envira Gallery
by · last CVE Oct 11, 2026
6
CVEs
0
On KEV
7.2
Max CVSS
6
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 3
Severity
All severities6Critical0High1Medium2Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Envira Gallery to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-104680
7.2
0%
Oct 11
Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard
Affected: before 1.16.2
CVE-2026-104653
6.8
0%
Oct 7
Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop Dimensions
Affected: before 1.16.1
CVE-2026-104652
6.8
0%
Oct 7
Envira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Image ID
Affected: before 1.16.1
CVE-2026-104684
2.7
0%
Oct 11
Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode
Affected: before 1.16.2
CVE-2026-104682
2.7
0%
Oct 11
Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route
Affected: before 1.16.2
CVE-2026-104681
2.7
0%
Oct 11
Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field
Affected: before 1.16.2
Showing 6